Код:
begin
TerminateProcessByName('c:\program files (x86)\plushd_1.02mv09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-6.exe');
TerminateProcessByName('c:\program files (x86)\gmsd_ru_005010149\gmsd_ru_005010149.exe');
TerminateProcessByName('c:\program files (x86)\03de0294-1447742658-05da-6c06-380700080009\hnsz25fb.tmp');
TerminateProcessByName('c:\program files (x86)\spacesondpro_v53.9193\ioproduct.exe');
TerminateProcessByName('c:\program files (x86)\03de0294-1447742658-05da-6c06-380700080009\knsta17d.tmp');
TerminateProcessByName('c:\users\73b5~1\appdata\local\temp\nsmbbd2.tmp');
TerminateProcessByName('c:\users\Пользователь\appdata\local\03de0294-1447841300-05da-6c06-380700080009\qnsc697e.tmp');
TerminateProcessByName('c:\program files (x86)\rec_en_77\rec_en_77.exe');
TerminateProcessByName('c:\users\Пользователь\appdata\local\smartweb\smartwebapp.exe');
TerminateProcessByName('c:\users\Пользователь\appdata\local\smartweb\smartwebhelper.exe');
TerminateProcessByName('c:\program files (x86)\spacesondpro_v53.9193\spacesondpro_service.exe');
TerminateProcessByName('c:\program files (x86)\sfk\ssfk.exe');
TerminateProcessByName('c:\users\Пользователь\appdata\local\gmsd_ru_005010149\upgmsd_ru_005010149.exe');
TerminateProcessByName('c:\users\73b5~1\appdata\local\temp\wk2_lluv48zuyb70.tmp');
TerminateProcessByName('c:\programdata\dwminiprod\wminipro.exe');
StopService('bykesute');
StopService('ginoquci');
StopService('hidekoqe');
StopService('vixepoqo');
StopService('WdsManPro');
StopService('xowijysy');
QuarantineFileF('c:\program files (x86)\plushd_1.02mv09.08', '*', true, '', 0 , 0);
QuarantineFileF('c:\program files (x86)\spacesondpro_v53.9193', '*', true, '', 0 , 0);
QuarantineFileF('c:\program files (x86)\rec_en_77', '*', true, '', 0 , 0);
QuarantineFileF('c:\users\Пользователь\appdata\local\smartweb', '*', true, '', 0 , 0);
QuarantineFileF('c:\program files (x86)\sfk', '*', true, '', 0 , 0);
QuarantineFileF('c:\programdata\dwminiprod', '*', true, '', 0 , 0);
QuarantineFileF('C:\Users\Пользователь\AppData\Local\Style Balance', '*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\globalUpdate', '*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\Tencent', '*', true, '', 0 , 0);
QuarantineFile('c:\program files (x86)\plushd_1.02mv09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-6.exe', '');
QuarantineFile('c:\program files (x86)\gmsd_ru_005010149\gmsd_ru_005010149.exe', '');
QuarantineFile('c:\program files (x86)\03de0294-1447742658-05da-6c06-380700080009\hnsz25fb.tmp', '');
QuarantineFile('c:\program files (x86)\spacesondpro_v53.9193\ioproduct.exe', '');
QuarantineFile('c:\program files (x86)\03de0294-1447742658-05da-6c06-380700080009\knsta17d.tmp', '');
QuarantineFile('c:\users\73b5~1\appdata\local\temp\nsmbbd2.tmp', '');
QuarantineFile('c:\program files (x86)\rec_en_77\rec_en_77.exe', '');
QuarantineFile('c:\users\Пользователь\appdata\local\smartweb\smartwebapp.exe', '');
QuarantineFile('c:\users\Пользователь\appdata\local\smartweb\smartwebhelper.exe', '');
QuarantineFile('c:\program files (x86)\spacesondpro_v53.9193\spacesondpro_service.exe', '');
QuarantineFile('c:\program files (x86)\sfk\ssfk.exe', '');
QuarantineFile('c:\users\Пользователь\appdata\local\gmsd_ru_005010149\upgmsd_ru_005010149.exe', '');
QuarantineFile('c:\users\73b5~1\appdata\local\temp\wk2_lluv48zuyb70.tmp', '');
QuarantineFile('c:\programdata\dwminiprod\wminipro.exe', '');
QuarantineFile('C:\Users\Пользователь\AppData\Local\Style Balance\xBin\StyleBalance.dll', '');
QuarantineFile('C:\Users\Пользователь\AppData\Local\Style Balance\xBin\qrk.dll', '');
QuarantineFile('C:\Users\Пользователь\AppData\Local\SmartWeb\swhk.dll', '');
QuarantineFile('C:\Users\Пользователь\AppData\Local\03DE0294-1447841300-05DA-6C06-380700080009\qnsc697E.tmp', '');
QuarantineFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '');
QuarantineFile('C:\Program Files (x86)\03DE0294-1447742658-05DA-6C06-380700080009\jnszBC5.tmp', '');
QuarantineFile('C:\Users\Пользователь\AppData\Local\03DE0294-1447760723-05DA-6C06-380700080009\snspC3CF.tmp', '');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16434.218\QMUdisk64.sys', '');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16434.218\TS888x64.sys', '');
QuarantineFile('C:\Program Files (x86)\SpaceSondPro_v53.9193\ioproduct_service.bat', '');
QuarantineFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-7.exe', '');
QuarantineFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-10.exe', '');
QuarantineFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-11.exe', '');
QuarantineFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-3.exe', '');
QuarantineFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-5.exe', '');
QuarantineFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-6.exe', '');
QuarantineFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-7.exe', '');
DeleteFile('C:\Windows\Tasks\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-6.job', '64');
DeleteFile('C:\Windows\Tasks\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-7.job', '64');
DeleteFile('C:\Windows\Tasks\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-10_user.job', '64');
DeleteFile('C:\Windows\Tasks\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-11.job', '64');
DeleteFile('C:\Windows\Tasks\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-3.job', '64');
DeleteFile('C:\Windows\Tasks\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-5.job', '64');
DeleteFile('C:\Windows\Tasks\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-6.job', '64');
DeleteFile('C:\Windows\Tasks\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-7.job', '64');
DeleteFile('c:\program files (x86)\plushd_1.02mv09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-6.exe', '32');
DeleteFile('c:\program files (x86)\gmsd_ru_005010149\gmsd_ru_005010149.exe', '32');
DeleteFile('c:\program files (x86)\03de0294-1447742658-05da-6c06-380700080009\hnsz25fb.tmp', '32');
DeleteFile('c:\program files (x86)\spacesondpro_v53.9193\ioproduct.exe', '32');
DeleteFile('c:\program files (x86)\03de0294-1447742658-05da-6c06-380700080009\knsta17d.tmp', '32');
DeleteFile('c:\users\73b5~1\appdata\local\temp\nsmbbd2.tmp', '32');
DeleteFile('c:\program files (x86)\rec_en_77\rec_en_77.exe', '32');
DeleteFile('c:\users\Пользователь\appdata\local\smartweb\smartwebapp.exe', '32');
DeleteFile('c:\users\Пользователь\appdata\local\smartweb\smartwebhelper.exe', '32');
DeleteFile('c:\program files (x86)\spacesondpro_v53.9193\spacesondpro_service.exe', '32');
DeleteFile('c:\program files (x86)\sfk\ssfk.exe', '32');
DeleteFile('c:\users\Пользователь\appdata\local\gmsd_ru_005010149\upgmsd_ru_005010149.exe', '32');
DeleteFile('c:\users\73b5~1\appdata\local\temp\wk2_lluv48zuyb70.tmp', '32');
DeleteFile('c:\programdata\dwminiprod\wminipro.exe', '32');
DeleteFile('C:\Users\Пользователь\AppData\Local\Style Balance\xBin\StyleBalance.dll', '32');
DeleteFile('C:\Users\Пользователь\AppData\Local\Style Balance\xBin\qrk.dll', '32');
DeleteFile('C:\Users\Пользователь\AppData\Local\SmartWeb\swhk.dll', '32');
DeleteFile('C:\Users\Пользователь\AppData\Local\03DE0294-1447841300-05DA-6C06-380700080009\qnsc697E.tmp', '32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '32');
DeleteFile('C:\Program Files (x86)\03DE0294-1447742658-05DA-6C06-380700080009\jnszBC5.tmp', '32');
DeleteFile('C:\Users\Пользователь\AppData\Local\03DE0294-1447760723-05DA-6C06-380700080009\snspC3CF.tmp', '32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16434.218\QMUdisk64.sys', '32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16434.218\TS888x64.sys', '32');
DeleteFile('C:\Program Files (x86)\SpaceSondPro_v53.9193\ioproduct_service.bat', '32');
DeleteFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-7.exe', '32');
DeleteFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-10.exe', '32');
DeleteFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-11.exe', '32');
DeleteFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-3.exe', '32');
DeleteFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-5.exe', '32');
DeleteFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-6.exe', '32');
DeleteFile('C:\Program Files (x86)\PlusHD_1.02mV09.08\59acf12a-3c64-4be8-ad9c-16dd07bba4c4-7.exe', '32');
DeleteService('bykesute');
DeleteService('ginoquci');
DeleteService('hidekoqe');
DeleteService('vixepoqo');
DeleteService('WdsManPro');
DeleteService('globalUpdate');
DeleteService('globalUpdatem');
DeleteService('pywifozu');
DeleteService('xowijysy');
DeleteService('QMUdisk');
DeleteService('TS888x64');
DeleteFileMask('c:\program files (x86)\plushd_1.02mv09.08', '*', true);
DeleteFileMask('c:\program files (x86)\spacesondpro_v53.9193', '*', true);
DeleteFileMask('c:\program files (x86)\rec_en_77', '*', true);
DeleteFileMask('c:\users\Пользователь\appdata\local\smartweb', '*', true);
DeleteFileMask('c:\program files (x86)\sfk', '*', true);
DeleteFileMask('c:\programdata\dwminiprod', '*', true);
DeleteFileMask('C:\Users\Пользователь\AppData\Local\Style Balance', '*', true);
DeleteFileMask('C:\Program Files (x86)\globalUpdate', '*', true);
DeleteFileMask('C:\Program Files (x86)\Tencent', '*', true);
DeleteDirectory('c:\program files (x86)\plushd_1.02mv09.08');
DeleteDirectory('c:\program files (x86)\spacesondpro_v53.9193');
DeleteDirectory('c:\program files (x86)\rec_en_77');
DeleteDirectory('c:\users\Пользователь\appdata\local\smartweb');
DeleteDirectory('c:\program files (x86)\sfk');
DeleteDirectory('c:\programdata\dwminiprod');
DeleteDirectory('C:\Users\Пользователь\AppData\Local\Style Balance');
DeleteDirectory('C:\Program Files (x86)\globalUpdate');
DeleteDirectory('C:\Program Files (x86)\Tencent');
ExecuteFile('schtasks.exe', '/delete /TN "59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-6" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "59acf12a-3c64-4be8-ad9c-16dd07bba4c4-1-7" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "59acf12a-3c64-4be8-ad9c-16dd07bba4c4-11" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "59acf12a-3c64-4be8-ad9c-16dd07bba4c4-3" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "59acf12a-3c64-4be8-ad9c-16dd07bba4c4-5" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "59acf12a-3c64-4be8-ad9c-16dd07bba4c4-6" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "59acf12a-3c64-4be8-ad9c-16dd07bba4c4-7" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineCore" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineUA" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SmartWeb Upgrade Trigger Task" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Style Balance" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'IOPROTECT');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'gmsd_ru_005010149');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'rec_en_77');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'SmartWeb');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'upgmsd_ru_005010149.exe');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.